The Cybersecurity and Infrastructure Security Agency updated its cyber incident reporting form to collect more specific details about attacks. The revised questionnaire includes questions on malicious software, hacking techniques, and insider threats while removing duplicate items. This update occurs while the final rule for the Cyber Incident Reporting for Critical Infrastructure Act remains under White House review. The new form incorporates the MITRE ATT&CK framework to help analysts connect unrelated incidents and identify responsible actors. CISA aims to use these reports to identify emerging campaigns and warn potential targets.
Read the full story at nextgov.com.
Photo: Pexels / Pixabay
